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5 CLAIMS 

What is claimed is: 

1 . A computer controlled method of analyzing a network, wherein the 
network has a plurality of network segments, the method comprising: 

10 identifying segment addresses of virtual private network segments in the 

network, wherein pairs of segment addresses define individual virtual private network 
segments; 

obtaining statistical data associated with each identified segment address 
in the network; and 

15 analyzing the obtained statistical data to identify similar statistical data 

corresponding to the pairs of segment addresses. 

2. The method of claim 1, wherein the step of analyzing the obtained 
statistical data further comprises the steps of: 

20 identifying potential pairs of segment addresses; 

obtaining refined statistical data associated with the identified potential 
pairs of segment addresses; and 

confirming that the potential pairs of segment addresses are the pairs of 
segment addresses based on the obtained refined statistical data. 

25 

3. The method of claim 1, further comprising the step of storing the 
pairs of segment addresses in a database. 

4. The method of claim 1, wherein the step of obtaining statistical 
30 data associated with each identified segment address in the network, further comprises 

the step of creating statistical fingerprint for each identified segment address. 
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5 5. The method of claim 4, wherein each statistical fingerprint 

comprises inverse pairs of statistics. 

6. The method of claim 4, wherein the step of creating statistical 
fingerprints further comprises the step of aggregating a predetermined set of core 

10 statistics. 

7. The method of claim 6, wherein the core statistics comprises at 
least one of number of bytes sent/received and number of send/receive errors. 

15 8. The method of claim 1, wherein the statistical data comprises at 

least one of number of bytes sent/received and number of send/receive errors. 

9. The method of claim 1, wherein the step of obtaining statistical 
data associated with each identified segment address further comprises the step of polling 

20 network devices containing segment addresses during a predetermined interval. 

10. The method of claim 9, wherein each network device comprises a 

router. 

25 11. The method of claim 9, wherein each segment address comprises a 

data link circuit identifier. 

12. The method of claim 1, wherein each segment address comprises a 
data link circuit identifier. 

30 



20 

13. A computer-readable medium having computer-executable 
instructions for performing the steps recited in claim 1. 

14. A computer controlled method of analyzing a network, wherein the 
network has a plurality of network segments, the method comprising: 

receiving segment addresses of selected network segments in the network, 
wherein each segment includes at least a portion spanning a public switched network and 
wherein each selected network segment is defined by pairs of segment addresses; 

obtaining statistical data associated with each identified segment address 

in the network; 

analyzing the obtained statistical data to identify similar statistical data; 

and 

identifying the pairs of segment addresses corresponding to the selected 
network segments, based on the identified similar statistical data. 

15. The method of claim 14 further comprising the steps of: 
obtaining refined statistical data associated with the identified potential 

pairs of segment addresses; and 

confirming that the potential pairs of segment addresses are the pairs of 
segment addresses based on the obtained refined statistical data; and 

storing the pairs of segment addresses in a database. 
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5 

16. A method for identifying virtual private network paths, comprising the 

steps of: 

identifying data link connection identifiers of one or more virtual private 

network paths; 

10 creating a list of unmatched data link connection identifiers; 

polling network devices associated with the datalink connection identifiers 
for core statistics; 

creating individual fingerprints for each datalink connection identifier 
based upon the core statistics; 
15 matching a fingerprint of each datalink connection identifier with a 

corresponding fingerprint of another datalink connection identifier; 

identifying one or more virtual private network paths based upon matching 
fingerprints of the datalink connection identifiers. 

20 17. The method of claim 16, wherein the step of polling further comprises 

the step of polling the network devices at predetermined intervals, 

18. The method of claim 16, wherein the step of creating individual 
fingerprints further comprises the step of creating individual fingerprints by utilizing 

25 inverse pairs of statistics. 

19. The method of claim 16, wherein the step of matching fingerprints 
further comprises matching core statistics of one end of a data link connection identifier 
with inverse core statistics at another data link connection identifier. 



